Tamp REST client for OWASP Dependency-Track v4.x (API v1) — upload CycloneDX BOMs, poll async analysis to completion, export findings in raw FPF JSON for downstream DefectDojo passthrough.
| Package | Status |
|---|---|
Tamp.DependencyTrack.V1 |
1.11.2 (post-migration from main tamp) |
dotnet add package Tamp.DependencyTrack.V1Multi-targets net8 / net9 / net10.
This package previously shipped from the main tamp repo (up to 1.11.1). It moved to its own satellite at 1.11.2 (TAM-254) so:
- Tool releases don't gate Tamp.Core releases (and vice versa).
- Adopters can pin the wrapper independently of Tamp.Core minors.
- The wrapper's release cadence tracks the wrapped tool instead of the whole framework.
Package ID, namespace, public API, and version line are unchanged — adopters see no break.
MIT — see LICENSE.